Method and device for providing a security breach indicative audio alert转让专利
申请号 : US12304193
文献号 : US09094441B2
文献日 : 2015-07-28
发明人 : Roman Mostinski , Asaf Ashkenazi
申请人 : Roman Mostinski , Asaf Ashkenazi
摘要 :
权利要求 :
We claim:
说明书 :
The invention relates to methods and devices for providing a security breach indicative audio alert.
Mobile devices such as cellular phones, media players and personal data accessories are capable of executing state of the art software. Typically, this state of the art software includes operating systems, applications, APIs and the like.
Few years ago only desktop computers and computer systems were subjected to attacks. Over the last couple of years even mobile devices are subjected to attacks.
When an attack succeeds the hacker can control the execution of software by the device, can insert his own software and the like. Usually, once the attack succeeds the hacker can prevent the previously executed software from sending security breach alerts, even when the device is capable of detecting the breach.
Some prior art devices addressed this problem by using dedicated light emitting diodes that provided a visual indication of the security breach. This solution is relatively costly. This solution is size and energy consuming, especially in small sized mobile devices.
There is a need to provide an efficient method and device for providing a security breach indicative signal.
A method and device for providing a security breach indicative audio alert, as described in the accompanying claims.
The present invention will be understood and appreciated more fully from the following detailed description of embodiments thereof taken in conjunction with the accompanying drawings in which:
When appropriate, like reference numerals and characters may designate identical, corresponding or similar components in differing figure drawings.
According to various embodiments illustrated in the following drawings a security alert indication can be provided. The indication is provided once a security breach is detected. It does not require a dedicated LED or dedicated external pins and wires for providing the security breach indication. Furthermore, the security breach audio (and optionally audio-visual indication) is generated by using hardware that is not controlled by software and therefore is not exposed to hacking attempts.
Device 110 can be included in a data and/or media processing apparatus (hereinafter information processing apparatus).
Device 110 includes integrated circuit 111 that includes: (i) security monitor 50 adapted to detect a security breach in device 110, (ii) loudspeaker 140, (iii) software controlled alert generator 122, (iv) secure audio alert generating hardware 160 that adapted to participate, in response to the detection of the security breach, in a generation of a security breach indicative audio alert; (v) audio source 124 such as a software controller audio source, and (vi) audio mixer 130 adapted to mix the security breach indicative audio alert signal with audio signals generated by software controlled audio source 124 to provide a mixed signal.
Mixed signal Smix 154 is provided to loudspeaker 140 that is adapted to reproduce the mixed signal as sound. It is noted that if audio source 124 does not provide any audio signal than the mixed signal Smix 154 will ideally include the security breach indicative audio alert signal.
It is noted that audio mixer 124 receives digital (and optionally analog) signals that represent sounds. These signals, when provided to a loudspeaker (such as loudspeaker 140) are converted to sound. For simplicity of explanation the signals provided to mixer 130 are referred to as audio signals.
It is further notes that various audio components can be connected between the audio mixer 130 and loudspeaker 140. These audio components can include amplifiers, digital to analog converters, filters and the like.
It is noted that the software controlled alert generator 122 and the audio source 124 can be controlled by the same controller (or processor) and that they both can be included within the component. For example the audio source can be an application that is executed by a processor while the software controller alert generator 122 can also be an application that is being executed by the same processor. This is not necessarily so. For example, the audio source can be a dedicated hardware component.
Security monitor 50 is adapted to detect a security breach and to assert a security breach signal (ALERT 52) to the secure audio alert generating hardware 160. It is noted that the number of signals generated by security monitor 50 can exceed one and that ALERT 52 can be negated (and not asserted) when a security breach is detected.
The security monitor can detect the security breach using one out of many prior art methods. For example, the security monitor 50 can compare between a currently executed software and previously stored version of that software.
Alternatively or additionally, security monitor 50 can detect an attempt to tamper the device (including applying force on the device, opening the device, and the like). Security monitor 50 can include a switch that alters its state when the housing of the device is breached.
Such a tamper attempt can be made in order to copy copyrighted works stored in the device. The tamper attempt can be performed in order to access an internal interface between an application processor and between either a monitor and/or an external audio codec.
Alternatively or additionally, the security monitor can detect that a certain key was presses, that a certain combination of keys were pressed and the like.
According to various embodiments of the invention the security monitor 50 can monitor potential violations of the integrity of one or more programs (for example, an occurrence of a malicious cod running, an attempt to substitute code and the like).
Security monitor 50 can detect a security violation in a security application that can require a user to send or to process some critical data (such as a credit card number, PIN codes and the like).
Conveniently, security monitor 50 can detect an unauthorized boot attempt and the like.
Conveniently, the security monitor 50 can generate JTAG, BIST or RTIC related alerts, an anti-virus indication but this is not necessarily so.
Security monitor 50 is characterized by a certain security level that enable it to generate alerts even device 10 was tampered or hacked.
Secure audio alert generating hardware 160 is secure because it is not influences by software and especially is not influenced by a hacking attempt. Secure audio alert generating hardware 160 includes audio selector 162, hardware audio alert generator 164 and an optional hardware repeater 166. Audio selector 162 selects between signals provided by hardware audio alert generator 164 and between signals provided by software controller alert generator 122 in response to the assertion or negation of ALERT 52.
Conveniently, hardware audio alert generator 164 can output alert signals in a repetitive manner, wherein the amount of repetitions or their duration is responsive to a trigger from hardware repeater 166. This allows a repetition of the generation of the audio alert while a security breach is detected, or during a more limited alert period.
The hardware audio alert generator 164 can generate various signal sequences that will be eventually heard by a human. The spectral signature of sounds that will be generated by device 110 in response to the security breach indicative audio alert signal outputted by hardware audio alert generator 164 is defined such as to be heard by human beings.
Conveniently, in order to avoid the masking of the security breach indicative audio alert signal (or at least in order to greatly complicate said masking) the device 110 can change dynamically (for example in a periodical manner or in a random manner) the characteristics of the security breach indicative audio alert signal.
Optionally the audio alert signal can have statistical characteristics. It can be an AWGN (Additive White Gaussian Noise, or a painted (narrower band) white noise, a pre-programmed watermark, or a repetitive audio alert, such as “this content is pirated”.
It is noted that the security monitor 50 can send multiple control signals (depending upon the detected breach/alert) and that these control signals can select one out of multiple audio signals provided by secure audio alert generating hardware 160.
Method 200 starts by optional stage 205 of booting a device that includes a loudspeaker. The device can be a music player, a media player, a mobile phone, a personal data accessory and the like. The device can be device 110 of
Stage 205 can be followed by stage 207 of generating sounds in response to one or more executed application. This stage includes generating sounds by software-controlled components such as a processor, and the like. The sounds can be responsive to wirelessly received information, to stored information, to information received over wires and the like.
Method 200 continues to stage 210 of detecting a security breach in a device that comprises a loudspeaker.
Stage 210 is followed by stage 220 of generating, in response to the detection of the security breach, by a secure audio alert generating hardware, a security breach indicative audio alert signal.
Conveniently, stage 220 can include at least one of the following: (i) generating a security breach indicative audio alert signal, (ii) repetitively generating a security breach indicative audio alert signal, for a predefined alert period, (iii) randomly altering at least one characteristic of the security breach indicative audio alert signal, and (iv) dynamically altering at least one characteristic of the security breach indicative audio alert signal.
Stage 220 is followed by stage 230 of mixing the security breach indicative audio alert signal with audio signals generated by a software controlled audio source to provide a mixed signal.
Stage 230 is followed by stage 240 of reproducing the mixed signal as sound via the loudspeaker.
Device 10 conveniently includes an integrated circuit 11.
Device 10 further includes a mouse interface 12 that is connected to a mouse 14, and is expected to display a mouse icon.
Mouse interface 12 is connected to interrupt request generator 15 that generates interrupt requests to a processor 16 when the mouse moves. The execution of the interrupt results in storing mouse location information in a location register 18. The mouse location information usually includes an X-axis component and a Y-axis component.
Device 10 can use various prior art solutions for generating mouse icons. U.S. Pat. No. 6,496,891 of Cluff et al., which is incorporated herein by reference, describes a device and method for interfacing with PS/2 mice and USB mice.
The mouse icon is characterized by its location as well as by its image. The image of the mouse icon is controlled by software and is stored in a mouse image buffer 22. Typical mouse images include multiple bits. These images usually include sixteen by sixteen pixels, thirty two by thirty two pixels and the like. The size of the mouse icon as well as the display resolution can affect the number of pixels. Each pixel is represented by three multi-bit color components.
Background image information is stored at a display frame buffer 24. This background image information can be generated by the operating system, by an application or any other software executed by device 10.
Assuming that there is not security breach. In such a case the displayed image unit 30 generates a displayed image by blending the background image with the mouse icon. It can access the location register 18, the mouse image buffer 22 and the display frame buffer 24 and generate a displayed image. This image is sent to the display 40. Display 40 is not dedicated for displaying the security breach indicative icon.
Device 10 also includes a security monitor 50 and a secure icon generating hardware 60. Security monitor 50 is adapted to detect a security breach and to assert a security breach signal (ALERT 52) to the secure icon generating hardware 60. It is noted that the number of signals generated by the security monitor can exceed one and that ALERT 52 can be negated (and not asserted) when a security breach is detected.
The security monitor can detect the security breach using one out of many prior art methods. For example, the security monitor 50 can compare between a currently executed software and previously stored version of that software.
The secure icon generating hardware 60 is secure because it is not influences by software and especially is not influenced by a hacking attempt. The secure icon generating hardware 60 includes a security breach indicative icon buffer 64 that stores an image of the security breach indicative icon, and icon image selector 62. The icon image selector 62 selects between the security breach indicative icon buffer 64 and between the mouse image buffer 22, in response to the assertion or negation of ALERT 52.
Conveniently, the displayed image unit 30 generates a displayed image by overlaying the security breach indicative icon over the background image. It is noted that the location of the security breach indicative icon can be responsive to the location of the mouse. Thus, once the mouse moves an interrupt request is generated and the location information in location register 18 is updated. The displayed image unit 30 updates the displayed image in response to changes in the location information as well as in response to the background image stored in the display frame buffer 24.
The displayed image unit 30 can perform various image refreshing, according to various prior art method including synchronous refreshing, asynchronous refreshing and the like.
According to one embodiment of the invention the security breach indicative icon buffer 62 includes pull up and/or pull down circuits that determine the values of pixels of the security breach icon. These pull up and/or pull down circuits can be replaced by fuses. Fuses can also by includes in addition to pull up or pull down circuits. It is noted that other one time programmable components can be used. The one time programmable components can be read after a power on reset is detected, and their content can be stored in a memory entry that can be read but not overwritten, after the booting sequence ends.
According to an embodiment of the invention the secure icon location information can change over time, especially when the device executed an application that does not use a mouse icon or in other occasions in which the user does not expect to view a mouse icon. The alterations can be made randomly, pseudo-randomly or according to a predefined sequence. It is noted that random changes in the location of the security breach indicative icon and/or random changes in the image of the security breach indicative icon can prevent the hacker from masking the security breach indicative icon.
When a security breach is detected ALERT 52 is used to select both the secure icon location information component 66 and the security breach indicative icon buffer 62.
Method 400 starts by optional stage 405 of booting a device that includes a display and a loudspeaker.
Conveniently, method 400 includes programming one-time programmable elements with security breach indicative icon information.
Conveniently, the booting can include writing information to secured memory elements that can be locked from further write attempts.
Stage 405 is followed by stages 407 and 409.
Stage 407 includes generating sounds in response to one or more executed application.
Stage 409 includes displaying a background image on the display. It is noted that the background image can be dynamically updated and that it can include multiple images, text, and the like.
Stages 405 and 407 is followed by stage 410 of detecting a security breach in a device that includes a display.
Stage 410 is followed by stages 420 and 460.
Stage 420 includes generating, in response to the detection of the security breach, by a secure audio alert generating hardware, a security breach indicative audio alert signal.
Stage 420 is followed by stage 430 of mixing the security breach indicative audio alert signal with audio signals generated by a software controlled audio source to provide a mixed signal.
Stage 430 is followed by stage 440 of reproducing the mixed signal as sound via the loudspeaker.
Stage 460 includes of generating, in response to the detection of the security breach, by at least a secure icon generating hardware, a security breach indicative icon.
Conveniently, stage 460 includes replacing a software-generated mouse icon by the security breach indicative icon. The replacement can be executed by using a multiplexer, by using logic gates and combinatorial logic.
Conveniently, stage 460 includes stage 466 of providing location information representative of a required location of the security breach indicative icon.
Conveniently, stage 466 is preceded by stage 462 of tracking after a location of a mouse.
Conveniently, stage 466 is preceded by stage 464 of retrieving predefined location information from one time programmable elements. It is noted that stages 462 and 464 are dependent upon the configuration of the device or upon the application that is being executed by the device. When a device is expected to show an icon that tracks after the movement of a mouse then stage 462 is usually followed by stage 466, else stage 464 is followed by stage 466.
Conveniently, stage 460 includes generating a multi-colored icon. Masking a moving multi-colored mouse is very hard, as its location is not necessarily known in advance. Altering the background image in order to mask the icon can also alert the user that a security breach occurred.
Conveniently, stage 460 includes retrieving security breach indicative icon image information from one time programmable elements. Conveniently, stage 460 can include retrieving security breach indicative information from a secured memory unit.
Conveniently, stage 460 includes randomly altering at least one characteristic of the security breach indicative icon.
Stage 460 is followed by stage 470 of overlaying the security breach indicative icon over a displayed background image.
Conveniently, stage 470 includes overlaying the security breach indicative icon at the required location.
Variations, modifications, and other implementations of what is described herein will occur to those of ordinary skill in the art without departing from the spirit and the scope of the invention as claimed. Accordingly, the invention is to be defined not by the preceding illustrative description but instead by the spirit and scope of the following claims.